CVE-2025-7913: TOTOLINK T6 MQTT Service updateWifiInfo buffer overflow
Published Jul 20, 2025
·Updated
A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748B20211015. Affected is the function updateWifiInfo of the component MQTT Service. The manipulation of the argument serverIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
3 affected components
TOTOLINK T6
All of the following
TOTOLINK T6 Firmware=v4.1.5cu.748_b20211015
TOTOLINK T6=3
Event History
Jul 20, 2025
CVE Published
via MITRE·11:32 PM
Data Sourced
via MITRE·11:32 PM
DescriptionSeverityWeakness
Jul 21, 2025
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Jun 19, 58473
Event
via NVD·02:24 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-7913?
CVE-2025-7913 is classified as a critical vulnerability.
2
How do I fix CVE-2025-7913?
To fix CVE-2025-7913, update the TOTOLINK T6 router firmware to the latest version provided by the vendor.
3
What component is affected by CVE-2025-7913?
CVE-2025-7913 affects the MQTT Service component of the TOTOLINK T6 router.
4
What type of attack can occur due to CVE-2025-7913?
CVE-2025-7913 allows for a remote buffer overflow attack.
5
Which versions of the TOTOLINK T6 are impacted by CVE-2025-7913?
CVE-2025-7913 impacts the TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015.